Most recent entries from all

bdu:2021-04679

certfr-2021-avi-951 — De multiples vulnérabilités ont été découvertes dans le noyau Linux de RedHat. Certaines d'entre elles permettent à un…

certfr-2021-avi-951

EUVD-2026-25875

fkie_cve-2021-28170

In the Jakarta Expression Language implementation 3.0.3 and earlier, a bug in the ELParserTokenManager enables invalid EL expressions to be evaluated as if they were valid.

GHSA-v6w3-2prq-h95f — Improper Input Validation in Jakarta Expression Language

Affected: Maven: com.sun.el:el-ri, Maven: org.glassfish:jakarta.el, Maven: org.glassfish:javax.el

In the Jakarta Expression Language implementation 3.0.3 and earlier, a bug in the ELParserTokenManager enables invalid EL expressions to be evaluated as if they were valid.

gsd-2021-28170

RHSA-2021:3466 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.9 security update on RHEL 6

undertow: HTTP2SourceChannel fails to write final frame under some circumstances may lead to DoS wildfly-core: Invalid Sensitivity Classification of Vault Expression undertow: buffer leak on incoming websocket PONG message may lead to DoS jakarta-el: ELParserTokenManager enables invalid EL expressions to be evaluate apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6

UBUNTU-CVE-2021-28170

Affected: Ubuntu:22.04:LTS: jakarta-el-api, Ubuntu:24.04:LTS: jakarta-el-api, Ubuntu:25.10: jakarta-el-api, Ubuntu:26.04:LTS: jakarta-el-api

In the Jakarta Expression Language implementation 3.0.3 and earlier, a bug in the ELParserTokenManager enables invalid EL expressions to be evaluated as if they were valid.

WID-SEC-W-2022-0916 — Red Hat JBoss Enterprise Application Platform: Mehrere Schwachstellen

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in der Red Hat JBoss Enterprise Application Platform ausnutzen, um Sicherheitsvorkehrungen zu umgehen, einen Denial of Service Zustand auszulösen und vertrauliche Informationen offenzulegen.